On 4 Jan 2007 at 12:12, Johannes Gebauer wrote:

> On 04.01.2007 David W. Fenton wrote:
> > That's only a possibility for people using IE6 or before. It's not
> > even remotely plausible for anyone using any non-IE browser, or IE7.
> 
> Can you explain?

The malware and spyware that infects visitors to a web page is 99% 
accomplished by the tacit installation of ActiveX controls. Only IE 
has ever supported that, and IE7 locks things down so it's not 
possible to install one accidentally.

There have been other exploits that *might* have introduced malware, 
but most were quickly patched. The IE vulnerability is architectural 
-- ActiveX never should have been enabled in the web browser except 
in a sandbox mode that couldn't do anything dangerous.

-- 
David W. Fenton                    http://dfenton.com
David Fenton Associates       http://dfenton.com/DFA/

_______________________________________________
Finale mailing list
[email protected]
http://lists.shsu.edu/mailman/listinfo/finale

Reply via email to